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© An IC card (1; 20) having a control element, 
memory element and other necessary components 
is designed to have the individual components incor- 
porated in a multi-layered integrated circuit, with the 
topmost layer constituted by an analyzable element 
(15; 35). This design prevents the functions of the 
incorporated integrated circuit from being optically 
analyzed, thus improving the information security of 
the IC card (1; 20). An information processing ap- 
paratus according to the present invention executes 
encryption of input information and decryption of 
read-out information in an IC card (1; 20). This 
allows the same information processing apparatus to 
perform information encryption of different systems 
for different information recording media (43). Ac- 
cordingly, even if a third party finds out the decryp- 
tion system for or one recording medium (43), he 
cannot immediately decrypt information on other re- 
cording media (43), which has been recorded by the 
same information processing apparatus. This, design 
is therefore effective in inhibiting the third party from 
reading out information stored on information record- 
ing media (43). 
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The present invention relates to a portable me- 
dium having a control element, memory element 
and the like, and to an information processing 
apparatus which uses this portable medium to en- 
crypt information and store the information in a 
recording medium, and uses the portable medium 
to decode the information stored in the recording 
medium. 

Conventionally, IC cards are classified into two 
types: the first type has a CPU, memory, arithmetic 
operation circuit, etc. incorporated in a one-chip 
LSI (Large Scale Integrated Circuit) on a same 
plane, and the second type has these components 
incorporated in each of multiple-chip LSIs to per- 
form multiple functions. 

When these IC cards are disassembled, the 
content of the incorporated LSI may be analyzed 
from the way by which the surface pattern of the 
LSI is formed, using optical reading means. For 
instance, the stored address of secret information 
stored in the IC card memory (ROM) may be 
analyzed or broken, or an encryption key and en- 
crypting means may be analyzed. Accordingly, IC 
cards with a control element, memory element and 
other necessary components integrated therein 
have a security problem to deal with due to the 
possibility that the functions of the incorporated IC 
may be optically analyzed. 

There is an information processing apparatus 
which encrypts information and stores it on an 
optical disk as an information recording medium, 
and permits only an authorized person to read out 
the encrypted information on the optical disk, de- 
crypt the encrypted information and output it for 
information security. 

Such an information processing apparatus is 
designed to execute a fixed encryption for all the 
optical disks handled by the apparatus. That is. the 
same encryption is performed for multiple optical 
disks that are handled by the information process- 
ing apparatus. This raises a problem that encrypted 
information stored on any optical disk may easily 
be decrypted if the encryption is analyzed from 
one of these optical disk. 

It is therefore an object of the present invention 
to provide a portable medium, which has a control 
element, memory element and other necessary 
components, incorporated in an integrated form, 
and can prevent optical analysis of the functions of 
the incorporated IC, thereby ensuring an improved 
security measure. 

It is another object of the present invention to 
provide an information processing apparatus which 
can inhibit encrypted information stored in a re- 
cording medium from being easily analyzed. 

To achieve the first object, according to one 
aspect of the present invention, there is provided a 
portable medium including an integrated circuit 
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having individual means integrally formed in a 
multi-layered structure on a single chip, character- 
ized by comprising means for storing secret in- 
formation, control means, connected to the storing 
5 means, for processing the secret information and 
exchanging information with an external unit, and 
first means, located on a topmost layer of the 
multi-layered structure, for protecting the informa- 
tion stored in the storing means whose content is 
io unanalyzable upon analysis. 

According to another aspect of the present 
invention, there is provided a portable medium 
including an integrated circuit having individual 
means integrally formed in a multi-layered struc- 
1$ ture on a single chip, characterized by comprising 
an EEPROM for storing input information, a ROM 
for storing secret data and a program necessary for 
a control operation the ROM underlying a second 
layer in the multi-layered structure, and a CPU for 
20 performing general control of the portable medium 
and exchanging information with an external unit. 

According to still another aspect of the present 
invention, there is provided a portable medium 
including an integrated circuit having individual 
25 means integrally formed in a multi-layered struc- 
ture, comprising an EEPROM, located on a top- 
most layer, for storing input information, a ROM. 
located on a second layer, for storing secret data 
and a program necessary for a control operation, a 
30 special arithmetic operation circuit and a RAM, 
both located on a third layer, for encrypting and 
decrypting an input signal, and a CPU, located on 
a bottom layer, for performing general control of 
the portable medium and exchanging information 
35 with an external unit. 

With the above structures, a portable medium 
having a control element, memory element and 
other necessary components is designed to have 
the individual components incorporated in a multi- 
40 layered integrated circuit, with the topmost layer 
constituted by an analyzable element. 

To achieve the second object, according to a 
different aspect of the present invention, there is 
provided an information processing apparatus char- 
ts acterized by comprising: first means for reading an 
encryption key from a portable medium having the 
encryption key stored in an unanalyzable manner; 
means for supplying information; means for en- 
crypting the information supplied from the sup- 
so plying means, using the encryption key read out by 
the first reading means; means for storing the 
information encrypted by the encrypting means on 
an information recording medium; second means 
for reading information from the information record- 
55 ing medium; means for decrypting the information 
read out by the second reading means, using the 
encryption key read out by the first reading means; 
and means for outputting the information decrypted 
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by the decrypting means. 

According to a still further aspect of the 
present invention, there is provided an information 
processing apparatus characterized by comprising: 
means for receiving a portable medium provided 
with information encrypting means and information 
decrypting means in an unanalyzable manner; 
means for supplying information; first processing 
means for encrypting the information supplied from 
the supplying means, using the information encryp- 
ting means of the received portable medium; 
means for storing the information encrypted by the 
first processing means on an information recording 
medium; means for reading information from the 
information recording medium; second processing 
means for decrypting the information read out by 
the reading means, using the decrypting means of 
the received portable medium; and means for out- 
putting the information decrypted by the second 
processing means. 

In the present invention, an encryption key is 
read by a first reading means from a portable 
medium having the encryption key stored in an 
unanalyzable manner, and then information sup- 
plied from an information supplying means are 
encrypted using the encryption key read out by the 
first reading means. The encrypted information 
area stored on an information recording medium 
and thereafter the information are read from the ■ 
information recording medium. The information 
read out by the second reading means are decryp- 
ted using the encryption key read out by the first 
reading means and then the decrypted information 
are outputted. 

Also in the present invention, a portable me- 
dium which is provided with information encrypting 
means and information decrypting means in an 
unanalyzable manner is received by receiving 
means. Then information supplied from an informa- 
tion supplying means are encrypted using the in- 
formation encrypting means of the portable me- 
dium received. The encrypted information are 
stored on an information recording medium. The 
information are thereafter read out from the in- 
formation recording medium, and then the informa- 
tion are decrypted using the information decrypting 
means of the received portable medium and the 
decrypted information are outputted. 

This invention can be more fully understood 
from the following detailed description when taken 
in conjunction with the accompanying drawings, in 
which: 

Fig. 1 is a schematic plan view illustrating an IC 

card as a portable medium according to one 

embodiment of the present invention; 

Fig. 2 is an exemplary diagram illustrating the 

internal connection of the IC card in Fig. 1 ; 

Fig. 3 is a conceptual diagram exemplifying the 



circuit structure of a functional element in Fig. 1 ; 
Fig. 4 is a block diagram showing the functional 
connection between individual sections of the 
functional element in Fig. 3; 
5 Fig. 5 is a schematic perspective view exem- 

plifying the outer appearance of the functional 
element in Fig. 3; 

Fig. 6 is a schematic plan view illustrating an IC 
card as a portable medium according to another 
w embodiment of the present invention; 

Fig. 7 is an exemplary diagram illustrating the 
internal connection of the IC card in Fig. 6; 
Fig. 8 is a conceptual diagram exemplifying the 
circuit structure of a functional element in Fig. 6; 
?5 Fig. 9 is a block diagram showing the functional 
connection between the individual sections of 
the functional element in Fig. 8; 
Fig. 10 is a schematic perspective view exem- 
plifying the outer appearance of the functional 
20 element in Fig. 8; 

Fig. 11 is a block diagram illustrating the ar- 
rangement of an electronic filing system as one 
embodiment of an information processing ap- 
paratus according to the present invention; and 
25 Fig. 12 is a flowchart for explaining the operation 
of the electronic filing system in Fig. 1 1 . 
Preferred embodiments of the present inven- 
tion will now be described with reference to the 
accompanying drawings. 
30 Fig. 1 is a schematic plan view showing an IC 

card 1 as a portable medium according to one 
embodiment of the present invention. The IC. card 
1 is an IC card having a contact, which conforms to 
ISO 7816 specified in the International Organization 
35 for Standardization. Provided on the surface of the 
IC card 1 is a contact 2 for connection to an 
external device (not shown). A functional element 3, 
which is constituted by an IC chip connected to the 
contact 2, is buried in the IC card 1 . The functional 
40 element 3 is supplied with the power and a control 
signal through the contact 2 from the outside of the 
IC card 1, and exchanges and processes various 
information. 

Fig. 2 is an exemplary diagram illustrating the 
45 internal connection of the IC card 1 shown in Fig. 
1. The contact 2 has contact portions connected to 
the respective I/O terminals of the functional ele- 
ment 3 by an internal connecting circuit 4. 

Fig. 3 is a conceptual diagram exemplifying the 
50 circuit structure of the functional element 3. The 
functional element 3 comprises a CPU 11 for ex- 
ecuting general control of the element 3, a special 
arithmetic operation circuit 12 for encrypting or 
decrypting an input signal, a RAM 13, a mask ROM 
55 14 for holding a control program, etc., and an 
EEPROM 15 for storing information. 

Fig. 4 is a block diagram showing how individ- 
ual sections of the functional element 3 are con- 
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nected functionally. The special arithmetic opera- 
tion circuit 12. the RAM 13, the mask ROM 14 and 
the EEPROM 15 are al! connected to the CPU 11. 
The CPU 1 1 is connected to the contact 2 by the 
internal connecting circuit 4. 

Fig. 5 is a schematic perspective view exem- 
plifying the outer appearance of the functional ele- 
ment 3 in Fig. 3. This functional element 3 is 
designed as a one-chip multi-layered LSI (Large- 
Scale Integrated Circuit). The LSI has an integrated 
circuit constituting the EEPROM 15, which may 
undergo optical reading (analyzing) without prob- 
lems, on its top layer, an integrated circuit con- 
stituting the mask ROM 14 on the second layer, an 
integrated circuit constituting the special arithmetic 
operation circuit 12 and the RAM 13 on the third 
layer, and an integrated circuit constituting the CPU 
1 1 on the bottom layer. The reason why the EEPR- 
OM 15 can be subjected to optical reading is 
because what is stored there can not surface by 
the optical reading. It will be possible to design the 
multi-layered function element 3 in the above man- 
ner using a three-dimensional LSI technology, for 
example. 

As described above, the functional element 3 
in this embodiment has a three-dimensional struc- 
ture instead of the conventional two-dimensional 
structure. Therefore, it is possible to reduce the 
chip area, to protect the IC card better against 
mechanical force applied thereto, and to increase 
the amount of storable information and executable 
functions (i.e.. to ensure multi-functioning). Further, 
since the integrated circuit constituting the EEPR- 
OM 1 5, whose content cannot be found out through 
circuit arrangement analysis, is provided on the top 
layer of the functional element 3, it is possible to 
prevent the optical analysis of the control program, 
a personal identification number and key, etc.. 
which are stored in the special arithmetic operation 
circuit 12 and the mask ROM 14, which underlie 
the first layer, and the EEPROM 15 on the top 
layer. Even if the IC card 1 is disassembled to 
analyze the personal identification number or the 
like, therefore, the functions of the incorporated LSI 
cannot be optically analyzed, thus improving the 
security of the program, and the personal iden- 
tification number and key which are stored in the 
IC card 1 . 

If necessary, an integrated circuit comprising 
only a pad as an I/O terminal to connect to the 
internal connecting circuit 4, may be formed as a 
layer, on the layer where the integrated circuit 
constituting the EEPROM 15 is formed. This can 
further prevent the circuit structure of the EEPROM 
15 from being analyzed optically. 

A test circuit for checking the operation of the 
functional element 3 and a pad as an I/O terminal 
of the test circuit may be provided in the functional 



element 3. Since the test circuit may be activated 
by a third party to analyze the operation of the 
functional element, however, the test circuit should 
be set unactivatable after the checking. For exam- 
5 pie, the test circuit may be designed not to be 
activated when a particular signal 'is sent from the 
test pad. 

Further, a IC card without a contact may be 
used as a portable medium. This contactless IC 

10 card will now be described. 

Fig. 6 is a schematic plan view showing a 
contactless IC card 20 as a portable medium ac- 
cording to the present invention. Buried in the 
contactless IC card 20 are a coil 21 for exchanging 

is information with an external device (not shown), a 
coil 22 for receiving the power and a control signal, 
and a functional element 23 constituted by an IC 
chip, which is constituted by an IC chip connected 
to the coils 21 and 22. The functional element 23 is 

20 supplied with the power and a control signal 
through the coil 22 from the outside of the IC card 
20, inputs and outputs an information transfer sig- 
nal through the coil 21, and exchanges and pro- 
cesses various information. 

25 Fig. 7 is an exemplary diagram illustrating the 

internal connection of the IC card 20 shown in Fig. 
6. The coils 21 and 22 are connected to the re- 
spective I/O terminals of the functional element 23 
by internal connecting circuits 24 and 25. 

so Fig. 8 is a conceptual diagram exemplifying the 

circuit structure of the functional element 23 in Fig. 
6. The functional element 23 comprises a CPU 31 
for executing general control of the element 23, a 
special arithmetic operation circuit 32 for encryp- 

35 ting and decrypting an input signal, a RAM 33, a 
mask ROM 34 for holding a control program, etc., 
an EEPROM 35 for storing information, an interface 
circuit 36 serving as an interface of the information 
transferring coil 21, and an interface circuit 37 

40 serving as an interface of the coil 22 for supplying 
the power and a control signal. 

Fig. 9 is a block diagram showing how individ- 
ual sections of the functional element 23 in Fig. 8 
are connected functionally. The special arithmetic 

45 operation circuit 32, the RAM 33, the mask ROM 
34, the EEPROM 35 and interface circuits 36 and 
37 are all connected to the CPU 31 . 

Fig. 10 is a schematic perspective view exem- 
plifying the outer appearance of the functional ele- 

50 ment 23 in Fig. 8. This functional element 23 is 
designed as a one-chip multi-layered LSI (Large- 
Scale Integrated Circuit). The LSI has the interface 
circuits 36 and 37, which may undergo optical 
reading without problems, on its top layer, an in- 

55 tegrated circuit constituting the EEPROM 35 on the 
second layer, an integrated circuit constituting the 
mask ROM 34 on the third layer, an integrated 
circuit constituting the special arithmetic operation 
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circuit 32 and the RAM 33 on the fourth layer, and 
an integrated circuit constituting the CPU 31 on the 
bottom layer. 

According to the contactless IC card 20 of this 
embodiment, it is possible to increase the amount 
of the information to be stored in the contactless IC 
card 20 and the number of functions incorporated 
in the contactless IC card 20, as in the case of the 
IC card 1, and it is also possible to improve the 
reliability of information security. If necessary, an 
integrated circuit, comprising only a pad as an I/O 
terminal to connect to the internal connecting cir- 
cuits 24 and 25, may be formed as a layer, on the 
layer where the interface circuits 36 and 37 are 
formed. This can further prevent the interface cir- 
cuits 36 and 37 from being analyzed optically. 

As in the case of the IC card 1 , a test circuit for 
checking the operation of the functional element 23 
and a pad as an I/O terminal of the test circuit may 
be provided in the functional element 23. In this 
case, however, the test circuit should be set unac- 
tivatable after the checking. 

Fig. 11 is a block diagram illustrating the ar- 
rangement of an electronic filing system as one 
embodiment of the information processing appara- 
tus according to the present invention. In this elec- 
tronic filing system, encrypted information is re- 
corded on an optical disk as an information record- 
ing medium, using the above-described IC card 1.- 
The electronic filing system comprises a controller 
40 for executing the general control of the system, 
a program memory 41, which stores a program for 
operating the controller 40, a data memory 42, 
which temporarily stores input information or read- 
out information, an optica! disk 43 where input 
information is to be recorded, a write/read unit 44, 
which writes information to or reads information 
from the optical disk 43, a keyboard 45 for con- 
ducting various operations, a display device 46 for 
presenting various displays, a scanner 47 for input- 
ting information to be written on the optical disk 43, 
a printer 48 for printing information read from the 
optical disk 43, an IC card unit 49 for exchanging 
information with the functional element 3 in the IC 
card 1, and a key pad 50 for inputting a personal 
identification number. 

The operation of the electronic filing system in 
Fig. 11 will now be described with reference to the 
flowchart shown in Fig. 12. 

This description covers the case where the 
functional element 3 in the IC card 1 is used as 
means for encrypting write information in the IC 
card 1 and decrypting read information, and a 
personal identification number such that the third 
person is prevented from operating the electronic 
filing system is stored in the functional element 3. 

First, a user selects a writing process or a 
reading process with the keyboard 45. Then, the 



controller 40 suggested the user to insert his IC 
card or input his personal identification number 
using the display device 46 (step ST1). The con- 
troller 40 judges if the user has inserted the IC 

s card 1 into the IC card unit 49 according to the 
suggestion (step ST2). The user inputs his per- 
sonal identification number with the key pad 50 
after loading the IC card 1 (step ST3). The input 
personal identification number is sent through the 

to IC card unit 49 to the functional element 3 in the IC 
card 1. The functional element 3 then collates the 
received personal identification number with the 
one registered in the card 1 (step ST4). More 
particularly, the CPU 1 1 in the functional element 3 

75 determines whether the received personal iden- 
tification number is identical to the one registered 
in the EEPROM 15. The CPU 11 sends an co- 
incidence signal or non-coincidence signal as the 
result of the collation to the controller 40 through 

20 the IC card unit 49. When receiving the non-co- 
incidence signal, the controller 40 informs the user 
of an error on the display device 46. When the 
controller 40 receives the coincidence signal, the 
controller 40 judges whether it is the writing pro- 

25 cess or the reading process (step ST5). 

In executing the writing process, the controller 
40 uses the display device 46 to guide the user, to 
input register conditions (retrieval information). Ac- 
cording to this guidance, the user enters the regis- 

30 ter conditions to the controller 40 using the key- 
board 45. The controller 40 sends information, in- 
put by the scanner 47, and address information as 
a stored position on the optical disk 43, to the 
functional element 3 in the IC card 1 through the IC 

35 card unit 49 (step ST6). The functional element 3 
subjects the information supplied from the control- 
ler 40 to encryption determined by the address 
information (step ST7). More specifically, in Fig. 4, 
the CPU 11 outputs the supplied information and 

40 the address information to the special arithmetic 
operation circuit 12. The special arithmetic opera- 
tion circuit 12 encrypts the supplied information 
according to the encryption process which is deter- 
mined by the address information. The types of 

45 encryption to be conducted in the special 
arithmetic operation circuit 12 are determined in- 
dividually in accordance with the address informa- 
tion, i.e., the information that represents where the 
information is stored on the optical disk 43. This 

50 encryption type may be determined in accordance 
with optical-disk identifying information, which is 
supplied for each optical disk 43. The information 
encrypted in the functional element 3 is sent 
through the IC card unit 49 and the controller 40 to 

55 the optical-disk write/read unit 44. The write/read 
unit 44 writes the transferred information at the 
stored position on the optical disk 43 (step ST8). 
The controller 40 stores the register conditions and 



5 



9 EP 0 458 ' 

the address information as a pair into the data 
memory 42. Through the above operation, the writ- 
ing process is completed. 

In executing the reading process, the controller 
40 uses the display device 46 to guide the user, to 5 
input retrieval conditions. According to this guid- 
ance, the user enters the retrieval conditions to the 
controller 40 using the keyboard 45. The controller 
40 retrieves address information, as a stored posi- 
tion of the information corresponding to the re- w 
trieval condition, from the data memory 42. The 
controller 40 then reads information which is written 
at the indicated stored position by the address 
information of the optical disk 43 (step ST9). The 
information read out is one which has been encryp- 75 
ted. The controller 40 sends the read-out informa- 
tion and the address information to the functional 
element 3 in the IC card 1 through the IC card unit 
49. The functional element 3 subjects the supplied 
information to encryption determined by the ad- 20 
dress information (step ST10). More specifically, in 
Fig. 4, the CPU 1 1 outputs the supplied information 
and the address information to the special 
arithmetic operation circuit 12. The special 
arithmetic operation circuit 12 decodes the sup- 25 
plied information according to the decrypting pro- 
cess which is determined by the address informa- 
tion. This decrypting content may be determined in 
accordance with optical-disk identifying information 
as in the case of encryption. The information de- 30 
crypted in the functional element 3 is sent through 
the IC card unit 49 and the controller 40 to the 
printer 48 or the display device 46. The printer 48 
or the display device 46 outputs the transferred 
information (step ST11), thus terminating the read- 35 
ing process. 

According to the information processing ap- 
paratus of the present invention, for example, the 
electronic filing system, encrypting the input in- 
formation and decrypting encrypted information 40 
which has been read out are executed in the IC 
card 1. This feature permits information to be en- 
crypted in different systems for different optical 
disks 43 even in the same electronic filing system. 
If a third party finds the decrypting system for one 45 
of the optical disks 43, therefore, he cannot imme- 
diately decrypt information on the other disks 43, 
which are recorded by the same electronic filing 
system. The present invention is extremely effec- 
tive in preventing the third party from reading in- 50 
formation recorded on optical disks. 

According to this invention, information is en- 
crypted using an encryption key or encrypting 
means, which stored in the IC card 1 and whose 
content cannot be easily read. The information is 55 
recorded on the optical disk 43, and at the same 
time, the information is read out, the information is 
first decoded using the encryption key or decryp- 
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ting means stored in the IC card 1, and then is 
output. The information recorded on the optical 
disk 43 is encrypted, and can hardly be analyzed. 

Further in this invention, since the encrypting 
system varies for each optical disk 43, or for each 
information-stored position on the optical disk 43, 
different encryptions are possible for different op- 
tica! disks 43 or different stored positions on the 
optical disk 43. The encrypted information record- 
ed on the optical disk 43 cannot therefore be 
analyzed easily. 

In the foregoing descriptions of this embodi- 
ment, encrypting the input information and decryp- 
ting the read-out information are executed in the IC 
card 1. The IC card 1 may be designed only to 
store an encryption key which serves to determine 
the types of the encrypting system and decrypting 
system, and the encryption key is sent from the IC 
card to the controller 40, for example, to execute 
information encryption or decryption therein ac- 
cording to the encryption key. Alternatively, mul- 
tiple encryption logics may be stored in advance in 
the electronic filing system, and an encryption 
code based on which the controller 40 determines 
which encryption logic should be used to encrypt 
or decrypt information, may be stored in the IC 
card 1. 

The individual embodiments have been de- 
scribed with reference to the case where an IC 
card having contacts is used, but a contactless IC 
card as described above may replace the former 
IC card. 

The foregoing description has been given of an 
optical disk used as an information recording me- 
dium in an electronic filing system, but other types 
of information recording media, such as a magnetic 
disk and an opto-electromagnetic disk may be 
used as well. The present invention may be applied 
to a system other than an electronic filing system 
which also stores information in an information re- 
cording medium. 

Claims 

1. A portable medium (3; 23) including an in- 
tegrated circuit having individual means integ- 
rally formed in a multi-layered structure on a 
single chip, characterized by comprising: 

means (14; 34) for storing secret informa- 
tion; 

control means (11, 12, 13; 31, 32, 33), 
connected to said storing means, for process- 
ing said secret information and exchanging in- 
formation with an external unit; and 

first means (15; 35), located on a topmost 
layer of said multi-layered structure, for pro- 
tecting said information stored in said storing 
means whose content is unanalyzable upon 
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analysis. 

A portable medium (3; 23) according to claim 
1 , characterized by further comprising interface 
means, provided on said topmost layer, for 5 
exchanging information with said external unit. 

A portable medium (3; 23) including an in- 
tegrated circuit having individual means integ- 
rally formed in a multi-layered structure on a 10 
single chip, characterized by comprising: 

an EEPROM (15; 35) for storing input in- 
formation; 

a ROM (14; 34) for storing secret data and 
a program necessary for a control operation, is 
said ROM (14; 34) underlying a second layer 
in said multi-layered structure; and 

a CPU (11, 31) for performing general con- 
trol of said portable medium (3; 23) and ex- 
changing information with an external unit. 20 

A portable medium according to claim 1, char- 
acterized in that said storing means (14; 34) 
includes means for storing information to be 
used for encryption/decryption of input infor- 25 
mation. 

A portable medium according to claim 4, char- 
acterized in that said control means (11, 12,' 
13; 31, 32, 33) includes means for performing 30 
encryption/decryption 

of said input information according to said 
information stored in said storing means. 

A portable medium (3; 23) including an in- 35 
tegrated circuit having individual means integ- 
rally formed in a multi-layered structure, char- 
acterized by comprising: 

an EEPROM (15; 35), located on a top- 
most layer, for storing input information; 40 

a ROM (14; 34), located on a second lay- 
er, for storing secret data and a program nec- 
essary for a control operation; 

a special arithmetic operation circuit (12; 
32) and a RAM (13; 33), both located on a 45 
third layer, for encrypting and decrypting an 
input signal; and 

a CPU (11; 31), located on a bottom layer, 
for performing general control of said portable 
medium (3; 23) and exchanging information so 
with an external unit. 

An information processing apparatus character- 
ized by comprising: 

first means (49) for reading an encryption 56 
key from a portable medium (1; 20) having 
said encryption key stored in an unanalyzable 
manner; 



means (47) for supplying information; 

means (40) for encrypting said information 
supplied from said supplying means (47), us- 
ing said encryption key read out by said first 
reading means (49); 

means (44) for storing said information en- 
crypted by said encrypting means (40) on an 
information recording medium (43); 

second means (44) for reading information 
from said information recording medium (43); 

means (40) for decrypting said information 
read out by said second reading means (44), 
using said encryption key read out by said first 
reading means (49); and 

means (46, 48) for outputting said informa- 
tion decrypted by said decrypting means (40). 

8. An information processing apparatus character- 
ized by comprising: 

means (49) for receiving a portable me- 
dium (1; 20) provided with information encryp- 
ting means (11, 12; 31, 32) and information 
decrypting means (11, 12; 31, 32) in an un- 
analyzable manner; 

means (47) for supplying information; 

first processing means (3; 23) for encryp- 
ting said information supplied from said sup- 
plying means (47), using said information en- 
crypting means (11, 12; 31, 32) of said re- 
ceived portable medium (1 ; 20); 

means (44) for storing said information en- 
crypted by said first processing means (3; 23) 
on an information recording medium (43); 

means (44) for reading information from 
said information recording medium (43); 

second processing means (3; 23) for de- 
crypting said information read out by said 
reading means (44), using said decrypting 
means (11, 12; 31, 32) of said received porta- 
ble medium (1; 20); and 

means (46, 48) for outputting said informa- 
tion decrypted by said second processing 
means (3; 23). 
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